WX3024 Mac地址认证不成功
任务要求：配置AC和建立RAIDUS服务器（Win2008_r2），手持终端（PDA和手机）需要通过MAC地址认证放行
问题：MAC地址只处于连接状态，不能成功验证通过
以下是命令行：
#
sysname H3C
#
domain default enable system
#
telnet server enable
#
port-security enable
#
oap management-ip 192.168.6.250 slot 0
#
wlan auto-ap enable
#
password-recovery enable
#
wlan capture file-name SnifferRecord
#
接口配置（略）
#
radius scheme mac
primary authentication 192.168.6.253
primary accounting 192.168.6.253
key authentication cipher $c$3$xwQerkLRnNejWOuUGcohWGb6T3AKAHYWFQ==
key accounting cipher $c$3$a+bOgUuQpN4m8HdNToOTCpAuXumaL6BLNw==
user-name-format without-domain
#
domain mac
authentication default radius-scheme mac
authorization default radius-scheme mac
accounting default radius-scheme mac
access-limit disable
state active
idle-cut disable
self-service-url disable
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool 0
network 192.168.6.0 mask 255.255.255.0
gateway-list 192.168.6.251
#
wlan service-template 4 crypto
ssid zhw65
beacon ssid-hide
bind WLAN-ESS 3
cipher-suite ccmp
security-ie rsn
service-template enabl
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
mac-authentication domain mac
#
interface GigabitEthernet1/0/2
port link-type trunk
port trunk permit vlan all
#
interface WLAN-ESS3
port access vlan 22
port-security port-mode mac-and-psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$ay9FOLDMM2sdMEPrGtHXZJTdKKWI0ptqsubBQAxT
mac-authentication domain mac
#
wlan ap ap-40 model WA2620i-AGN id 40
serial-id 219801A0CNC15C001803
radio 1
radio 2
service-template 1
service-template 4
service-template 5
radio enable
(0)
最佳答案
全局把mac-authentication功能打开，另外你那个物理接口上的mac认证删除一下，如果还是不行，可以先尝试本地mac地址认证看看。
(0)
暂无评论
该问题暂时没有网友解答
